Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Rowland Penny
Hi, Remove all of this: # security = ads password server = 192.168.25.133 idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes winbind cache time = 10 winbind use default domain = yes Then remove this line: valid users = @SAMDOM\S

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Ulrich Schneider
Could you please confirm how you provisioned samba4, post a sanitized version of your smb.conf and explain just what you are hoping to achieve. Ok, I will do that. I want to use samba4 1. as an active directory domain controller 2. as a file server providing diefferent shares for different wind

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Rowland Penny
Hi, I think your problem may be that you are are trying to run the standalone winbind daemon at the same time as the samba deamon, you cannot do this, the samba daemon has its own built in winbind. Could you please confirm how you provisioned samba4, post a sanitized version of your smb.conf and e

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Ulrich Schneider
d) that are given by samba. You should have a command to find who ius which number, but I don't know it yet (I'm new to samba too !!) Thierry Gonon Archéologue - Administrateur Systèmes et Réseaux Responsable Informatique Chronoterre Archéologie - Mail original - De: "Ulrich Sch

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Ulrich Schneider
Hi Try winbind: /etc/nsswitch.conf passwd: files winbind group: files winbind ln -s /usr/local/samba/lib/libnss_winbind.so.2 /lib/libnss_winbind.so ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2 ln -s /usr/local/samba/lib/pam_winbind.so /lib/security Does getent

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Thierry Gonon
samba too !!) > > Thierry Gonon > Archéologue - Administrateur Systèmes et Réseaux > Responsable Informatique > Chronoterre Archéologie > > ----- Mail original ----- > De: "Ulrich Schneider" > À: samba@lists.samba.org > Envoyé: Lundi 20 Mai 2013 10:03:25 > O

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Pekka L.J. Jalkanen
n > Archéologue - Administrateur Systèmes et Réseaux > Responsable Informatique > Chronoterre Archéologie > > - Mail original - > De: "Ulrich Schneider" > À: samba@lists.samba.org > Envoyé: Lundi 20 Mai 2013 10:03:25 > Objet: Re: [Samba] configuring Sha

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Ulrich Schneider
i 2013 10:03:25 Objet: Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC I created two folders as different win users in a samba share. 1. Folder is testadmin created as user Domain Administrator 2. Folder is testschueler2 created as user schueler2 ls -la drwxrwxr-x+ 2 300 users 40

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Thierry Gonon
rre Archéologie - Mail original - De: "Ulrich Schneider" À: samba@lists.samba.org Envoyé: Lundi 20 Mai 2013 10:03:25 Objet: Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC I created two folders as different win users in a samba share. 1. Folder is testadm

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-20 Thread Ulrich Schneider
I created two folders as different win users in a samba share. 1. Folder is testadmin created as user Domain Administrator 2. Folder is testschueler2 created as user schueler2 ls -la drwxrwxr-x+ 2 300 users 4096 Mai 20 09:57 testadmin drwxrwxr-x+ 2 326 users 4096 Mai 20 09:59 testschuel

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread steve
On Sun, 2013-05-19 at 20:10 +0800, wong lmark wrote: > No. I am not sure that where is the dns reconds store in Samba4. > But I have not install bind before upgrade. You can see them: samba-tool dns query [options] -- To unsubscribe from this list go to the following URL and read the instr

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread wong lmark
Yes, but I never see a dns folder in my samba/private/ I still finding out the problems, 2013/5/19 steve > On Sun, 2013-05-19 at 18:18 +0800, wong lmark wrote: > > Haha, I am not sure that. > > May I ask a question? Is it the DNS need to take some configuration > > after classupgrade? > > No, bu

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread steve
On Sun, 2013-05-19 at 18:18 +0800, wong lmark wrote: > Haha, I am not sure that. > May I ask a question? Is it the DNS need to take some configuration > after classupgrade? No, but make sure that none of the old dns, ldap, smb nor nmb are running before you call samba. Did you get a chance to che

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread wong lmark
Haha, I am not sure that. May I ask a question? Is it the DNS need to take some configuration after classupgrade? 2013/5/19 steve > On Sun, 2013-05-19 at 18:02 +0800, wong lmark wrote: > > I read a article " > http://www.smilingsouls.net/blog/linux/ad_integration.html > > " > > Just for referenc

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread steve
On Sun, 2013-05-19 at 18:02 +0800, wong lmark wrote: > I read a article "http://www.smilingsouls.net/blog/linux/ad_integration.html > " > Just for reference. Hi That's for joining a Linux client to an already configured DC. BTW it's strange. He configures nss-ldap and then uses winbind! Steve --

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread steve
On Sun, 2013-05-19 at 11:57 +0200, Ulrich Schneider wrote: > I don't have a clue ... just want to make samba and windows ad work > > uli@uli-sd30v10:/data$ net ads join -U Administrator > Host is not configured as a member server. > Invalid configuration. Exiting > Failed to join domain: This

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread wong lmark
I read a article "http://www.smilingsouls.net/blog/linux/ad_integration.html " Just for reference. 2013/5/19 Ulrich Schneider > I don't have a clue ... just want to make samba and windows ad work > > uli@uli-sd30v10:/data$ net ads join -U Administrator > Host is not configured as a member serve

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread Ulrich Schneider
I don't have a clue ... just want to make samba and windows ad work uli@uli-sd30v10:/data$ net ads join -U Administrator Host is not configured as a member server. Invalid configuration. Exiting Failed to join domain: This operation is only allowed for the PDC of the domain. uli@uli-sd30v1

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread steve
On Sun, 2013-05-19 at 11:30 +0200, Ulrich Schneider wrote: > Looks to me like "valid users" is not working. >valid users = @samdom+schueler > > [lehrer] >path = /data/lehrer >comment = Lehrer >read only = no >valid users = @samdom+lehrer Hi samdom is a dom

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread Ulrich Schneider
Looks to me like "valid users" is not working. I get a popup windows with username/pwd when accessing the shares. Or is there an error in smb.conf? Is this correct? ... valid users = @samdom+schueler ... meaning windows group schueler windows domain samdom ---

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread steve
On Sun, 2013-05-19 at 16:27 +0800, wong lmark wrote: > Please let me simplify the question. I chose the in place upgrade > Samba 3 to Samba 4 in my CentOS 6.4. Hi Ok, so this Domain has been produced by: /usr/local/samba/bin/samba-tool domain classicupgrade /etc/samba/smb.conf --dbdir=/var/lib/sam

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread steve
On Sun, 2013-05-19 at 09:14 +0200, Ulrich Schneider wrote: > Hm, your alternative (understanding windows acls) seems not much better > to me. > > Yesterday it seemed to work ... until I deleted a folder created by an > administrator as a ordinary user. > > Do I get this right? valid users = @gr

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-19 Thread Ulrich Schneider
Hm, your alternative (understanding windows acls) seems not much better to me. Yesterday it seemed to work ... until I deleted a folder created by an administrator as a ordinary user. Do I get this right? valid users = @group ... so @group could be any group in the Active Directory? Hi I

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread wong lmark
If I just need to migrate the Samba 3 to samba 4 without the bind, what command should I use? Is it also "/usr/local/samba/bin/samba-tool domain classicupgrade /etc/samba/smb.conf --dbdir=/var/lib/samba/ --use-xattrs=yes --realm= TEST.COM"? 2013/5/19 steve > On Sat, 2013-05-18 at 22:24 +0100, Ad

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread steve
On Sat, 2013-05-18 at 22:24 +0100, Adam Thorn wrote: > If you want to do more complex things with ACLs (like using the Windows > security dialog box), you also need to set "nt acl support=yes" in the samba > share config. Hi Do we have to set nt acl support= yes? On our 4.0.6 git install it's

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread steve
On Sat, 2013-05-18 at 22:40 +0200, Ulrich Schneider wrote: > OK, I read a lot lot today ... last time I read samba manuals has been a > while ... > > so new to me is ... acls in the file system. > > so is this correct, I can adapt windows file security settings directly > in windows ... and som

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread Adam Thorn
Ulrich Schneider wrote: >OK, I read a lot lot today ... last time I read samba manuals has been >a >while ... > >so new to me is ... acls in the file system. > >so is this correct, I can adapt windows file security settings directly > >in windows ... and somehow mysteriously ... same thing is

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread Ulrich Schneider
OK, I read a lot lot today ... last time I read samba manuals has been a while ... so new to me is ... acls in the file system. so is this correct, I can adapt windows file security settings directly in windows ... and somehow mysteriously ... same thing is done in the unix file system? AWS

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread Adam Thorn
Ulrich Schneider wrote: >Maybe I should rephrase the question (and use a more suitable topic) > >I have Samba 4.0.5. as an active domain controller. >I want to know how to set up shares e.g. this way: > >share1 accessible r/w for users in the active directory user group >group1 > >share

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread wong lmark
Hi Steve, I used "rpm -qa | grep winbind" I saw that tools are installed in my environment. - samba-winbind-clients-3.6.9-151.el6.x86_64 - samba-winbind-3.6.9-151.el6.x86_64 Is it I need to install more? 2013/5/18 steve > On Sat, 2013-05-18 at 16:31 +0200, steve wrote: > > On Sat, 20

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread steve
On Sat, 2013-05-18 at 16:31 +0200, steve wrote: > On Sat, 2013-05-18 at 12:51 +0200, Ulrich Schneider wrote: > > Maybe I should rephrase the question (and use a more suitable topic) > > > > I have Samba 4.0.5. as an active domain controller. > > I want to know how to set up shares e.g. this way: >

Re: [Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread steve
On Sat, 2013-05-18 at 12:51 +0200, Ulrich Schneider wrote: > Maybe I should rephrase the question (and use a more suitable topic) > > I have Samba 4.0.5. as an active domain controller. > I want to know how to set up shares e.g. this way: > > share1accessible r/w for users in the active d

[Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

2013-05-18 Thread Ulrich Schneider
Maybe I should rephrase the question (and use a more suitable topic) I have Samba 4.0.5. as an active domain controller. I want to know how to set up shares e.g. this way: share1 accessible r/w for users in the active directory user group group1 share2 accessible read only for users in the ac